CVE-2026-57534: Stored XSS in pretix-pages
Published Jun 25, 2026
·Updated
Malicious HTML content could be injected into the content of a page in the pretix-pages plugin.
Affected Software
1 affected component
pretix pretix-pages plugin
Event History
Jun 25, 2026
CVE Published
via MITRE·02:11 PM
Data Sourced
via MITRE·02:11 PM
DescriptionWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-57534?
CVE-2026-57534 has a risk rating of 32, indicating it poses a moderate risk due to the potential for stored XSS attacks.
2
How do I fix CVE-2026-57534?
To fix CVE-2026-57534, update to the latest version of the pretix-pages plugin that addresses this vulnerability.
3
What type of vulnerability is CVE-2026-57534?
CVE-2026-57534 is classified as a stored Cross-Site Scripting (XSS) vulnerability.
4
What could an attacker achieve using CVE-2026-57534?
An attacker could inject malicious HTML content, potentially leading to unauthorized actions or data theft.
5
In which software is CVE-2026-57534 found?
CVE-2026-57534 is found in the pretix-pages plugin for the pretix software.